hdk88 Privacy Policy
How We Handle Your Data

1 Introduction

hdk88 ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who uses our platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by hdk88. Please read this document carefully to understand our views and practices regarding your personal data and how we treat it.

This Privacy Policy applies to all users of the hdk88 platform, including the website at hdk88.io, any associated mobile-optimised interface, and all services provided therein, including sports betting, live casino games, slot games, virtual sports, and customer support interactions. It applies to all players located in Bangladesh and any other jurisdiction from which hdk88's services are legally accessed.

This Privacy Policy should be read alongside the hdk88 Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall legal framework governing your relationship with hdk88. By registering for an hdk88 account or continuing to use the hdk88 platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

2 Data Controller

For the purposes of applicable data protection law, hdk88 is the data controller in respect of personal data collected and processed through the hdk88 platform. As data controller, hdk88 determines the purposes and means of processing personal data submitted by users of the platform.

All data protection enquiries, access requests, correction requests, and erasure requests should be addressed to the hdk88 data protection contact at: [email protected] with the subject line "Privacy Request". Please include your registered username, the email address associated with your account, and a clear description of your request in all correspondence.

3 Data We Collect

hdk88 collects and processes the following categories of personal data in connection with the operation of its platform and the delivery of its services to players in Bangladesh:

hdk88 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) from its players. If any such data is incidentally included in documentation submitted for KYC purposes, it will not be processed for any purpose other than the verification for which it was submitted.

4 How We Collect Your Data

hdk88 collects personal data through the following channels and mechanisms:

• Direct submission by you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, respond to a survey, or otherwise interact with the platform by entering information.
• Automated technical collection: When you browse the hdk88 website or use the platform, certain technical data (IP address, device data, session data, cookies) is automatically collected by our web servers and analytics systems.
• Third-party payment providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, those payment providers share transaction confirmation data with hdk88 to reconcile your account balance.
• KYC and identity verification partners: hdk88 uses third-party identity verification services to cross-reference the documents you submit against authoritative data sources. These partners return a verification status to hdk88 and may share additional identity data required to complete verification.
• Game providers: Third-party game studios (such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe) share your in-game activity data with hdk88 to record game results, calculate winnings, and detect prohibited conduct.
• Fraud and security services: hdk88 uses specialist third-party fraud detection services that analyse behavioural and technical signals to identify suspicious activity on the platform.

5 Legal Basis for Processing

hdk88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity concerned:

• Contractual necessity: Processing that is necessary to perform the contract between you and hdk88 — including creating and managing your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal obligation: Processing that is required to comply with applicable legal obligations, including anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, financial record-keeping obligations, and responses to lawful requests from law enforcement or regulatory authorities.
• Legitimate interests: Processing carried out in furtherance of hdk88's legitimate business interests where those interests are not overridden by your rights and interests. This includes fraud detection and prevention, platform security monitoring, responsible gaming analysis, and service improvement through analytics.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to direct marketing communications. You may withdraw your consent to marketing at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

6 How We Use Your Data

hdk88 uses the personal data it collects for the following specific purposes. Where the legal basis for each use is not immediately obvious, we have indicated it in parentheses:

• To register and maintain your hdk88 account, including processing your username, password, and account preferences. (Contractual necessity)
• To verify your identity and age in accordance with our KYC obligations, including reviewing submitted identification documents. (Legal obligation; Contractual necessity)
• To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain accurate records of all financial transactions on your account. (Contractual necessity; Legal obligation)
• To settle sports bets, record casino game outcomes, apply bonus credits, and manage your real-money balance in Bangladeshi Taka (৳). (Contractual necessity)
• To detect, investigate, and prevent fraud, money laundering, collusion, prohibited conduct, and other activities that violate our Terms & Conditions. (Legal obligation; Legitimate interests)
• To monitor your gambling patterns for responsible gaming purposes, including identifying signs of problem gambling and reaching out proactively if concerning patterns are detected. (Legal obligation; Legitimate interests)
• To communicate with you regarding your account, including security alerts, transaction confirmations, support responses, and policy updates. (Contractual necessity; Legal obligation)
• To send you promotional offers, bonus notifications, and marketing communications regarding hdk88 products and services — only where you have provided consent or where we have a legitimate interest to do so and you have not opted out. (Consent; Legitimate interests)
• To analyse how players use the hdk88 platform so that we can improve product features, fix technical issues, and deliver a better overall experience. (Legitimate interests)
• To comply with requests from law enforcement agencies, courts, regulators, or other public authorities where disclosure is required by applicable law. (Legal obligation)

7 Sharing Your Data

hdk88 does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other financial institutions receive the transaction data necessary to process your deposits and withdrawals. These providers are contractually bound to handle your data securely and only for payment processing purposes.
• KYC and identity verification providers: hdk88 uses regulated third-party identity verification services to validate the documents you submit. These providers process your identity data under binding data-processing agreements and are prohibited from using it for their own commercial purposes.
• Game providers and software studios: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and other third-party game studios receive the session and account data necessary to run game sessions in real time and to return verified results to hdk88. Game providers do not receive your financial or contact data beyond what is technically required for game session management.
• Fraud and security service providers: Specialist providers receive technical and behavioural data (such as IP addresses and session patterns) to perform fraud analysis. They process this data as data processors acting on hdk88's instructions.
• Law enforcement and regulatory authorities: hdk88 will disclose personal data to police, courts, financial intelligence units, or other public authorities when legally required to do so, including in connection with investigations into fraud, money laundering, or other criminal activity.
• Business transfers: In the event that hdk88 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data-processing practices that result from it.

8 Cookies and Tracking Technologies

hdk88 uses cookies, pixel tags, local storage objects, and similar tracking technologies on the hdk88 platform. A cookie is a small text file placed on your device when you visit a website. Cookies serve a range of functions, from keeping you logged in to helping us understand how you navigate the platform so we can improve it.

hdk88 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the hdk88 platform to function. They enable core features such as logging in, maintaining your session while you navigate between pages, and keeping your betting slip populated. These cookies cannot be disabled without impairing the operation of the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, your chosen display settings, and whether you have previously acknowledged certain notices — so that you do not need to re-enter them on each visit.
• Analytics Cookies: hdk88 uses analytics cookies to collect aggregated, anonymised data about how users interact with the platform, including which pages are visited most frequently, where users spend the most time, and where technical errors occur. This data is used solely to improve the platform and is not used to identify individual users.
• Security Cookies: These cookies support hdk88's fraud detection and account security systems. They help identify suspicious login patterns and protect your account from unauthorised access.

hdk88 does not use advertising or retargeting cookies that track your browsing activity across third-party websites. You may manage or disable cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from using core features of the hdk88 platform, including logging in and placing bets.

9 Data Retention

hdk88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, reporting, or regulatory requirements. When data is no longer required, it is securely deleted or irreversibly anonymised.

The following general retention periods apply to data held by hdk88:

• Active account data (identity, contact, financial, transaction): Retained for the duration of the account relationship and for a period of five (5) years following permanent account closure, to comply with anti-money-laundering record-keeping requirements.
• KYC documentation (identity documents, proof of address): Retained for a period of five (5) years following account closure or the completion of the KYC process to which the documents relate, whichever is later.
• Communications data (support tickets, chat transcripts): Retained for a period of two (2) years following the closure of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Technical and usage data (IP logs, session logs): Retained for a period of twelve (12) months from the date of collection, after which it is aggregated or anonymised for analytical purposes.
• Marketing consent records: Retained for as long as you maintain a marketing opt-in, and for a period of three (3) years following any opt-out, as evidence of the consent or withdrawal record.

Where a legal obligation, regulatory investigation, or active dispute resolution process requires retention beyond the periods stated above, hdk88 will retain relevant data for as long as that obligation or process remains active.

10 Data Security

hdk88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the hdk88 platform.
• AES-256 encryption for sensitive data stored at rest on hdk88 servers, including financial records and identity documents.
• Role-based access controls that restrict employee and contractor access to personal data strictly to those who need it to perform their job functions.
• Regular penetration testing, vulnerability assessments, and third-party security audits of the hdk88 platform infrastructure.
• Continuous intrusion detection monitoring with automated alerts for anomalous access patterns.
• Two-factor authentication (2FA) available for player accounts and mandatory for all hdk88 staff accounts with access to personal data.
• Formal data breach response procedures, including notification protocols that ensure affected players are informed promptly in the event of a significant security incident.

While hdk88 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is entirely immune to security risk. You also have a responsibility to protect your account by using a strong, unique password, keeping your login credentials confidential, and reporting any suspected unauthorised access to [email protected] without delay.

11 Your Rights

As an individual whose personal data is processed by hdk88, you have the following rights in relation to your personal data. To exercise any of these rights, please contact hdk88 at [email protected] with the subject line "Privacy Request".

• Right of Access: You have the right to request a copy of the personal data that hdk88 holds about you. hdk88 will provide this information in a clear and structured format within 30 calendar days of receiving a valid request.
• Right to Rectification: If the personal data hdk88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may also update certain account information directly through your account settings dashboard.
• Right to Erasure: In certain circumstances, you have the right to request that hdk88 delete the personal data it holds about you. This right is not absolute — hdk88 may be required to retain certain data to comply with legal obligations (such as AML record-keeping requirements) even after you have closed your account.
• Right to Restriction of Processing: You have the right to request that hdk88 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where hdk88 processes your personal data on the basis of consent or contractual necessity, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where hdk88 relies on legitimate interests as its legal basis. You also have an unconditional right to object to your personal data being processed for direct marketing purposes at any time.
• Right to Withdraw Consent: Where hdk88 processes your data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

hdk88 will respond to all privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.

12 Marketing Communications

hdk88 may send you promotional and marketing communications by email or SMS where you have provided consent to receive such communications at the time of registration or subsequently via your account settings. Marketing communications from hdk88 may include information about:

• Welcome bonuses, reload bonuses, free bet offers, and other promotional incentives.
• New game releases from partner studios including Pragmatic Play, Evolution Gaming, NetEnt, and others.
• Upcoming sports betting markets, including BPL, IPL, T20 World Cup, and ICC events relevant to Bangladesh.
• Seasonal promotions tied to Bangladeshi cultural events such as Pohela Boishakh, Eid, and Victory Day.
• Platform updates, new features, and security notices.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, by adjusting your communication preferences in your hdk88 account settings, or by sending a written opt-out request to [email protected]. Opting out of marketing will not affect your receipt of service-related communications, such as transaction confirmations, account security alerts, and support responses, which hdk88 is required to send under the terms of your account agreement.

13 Responsible Gaming and Data

hdk88 processes certain personal and behavioural data specifically in the context of its responsible gaming obligations. This includes monitoring your deposit frequency, bet size, session duration, loss patterns, and self- exclusion status to identify early indicators of problem gambling behaviour.

Where hdk88's responsible gaming monitoring systems detect patterns consistent with problem gambling — such as rapidly escalating deposit amounts, frequent late-night sessions, or repeated failed attempts to self-exclude — hdk88 may use your contact data to reach out proactively with responsible gaming resources and information. This processing is carried out on the basis of hdk88's legal obligations and legitimate interests in promoting safe gambling practices.

If you voluntarily apply a deposit limit, loss limit, session time limit, cooling-off period, or self-exclusion through your account settings or by contacting support, hdk88 will record and enforce that restriction using your account data. Self-exclusion records are retained for the full duration of the exclusion period and for a minimum of five years thereafter, to prevent circumvention through re-registration. For full information on responsible gaming tools available on the hdk88 platform, please visit our Responsible Gaming page.

14 Third-Party Links

The hdk88 platform may contain references to third-party services — such as payment providers like bKash and Nagad — whose own websites, apps, or interfaces may be accessed during the deposit or withdrawal process. Please be aware that hdk88 does not control those third-party platforms and is not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party service you interact with when completing a financial transaction in connection with your hdk88 account.

hdk88's Privacy Policy applies solely to data processed by hdk88 on the hdk88 platform. It does not extend to the data practices of third-party game providers, payment processors, or any other external services accessed through or in connection with your use of hdk88.

15 Children and Minors

The hdk88 platform is strictly intended for adults aged 21 years and above. hdk88 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the hdk88 account registration and KYC process, and hdk88 employs automated and manual controls to prevent minors from accessing the platform.

If hdk88 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to close the relevant account, refund any deposits held in that account, and permanently delete all personal data associated with it. If you believe that a minor has registered an account on the hdk88 platform, please notify us immediately at [email protected] with the subject line "Minor Account Report" so that we can investigate and take appropriate action.

16 Changes to This Policy

hdk88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The current version of this Privacy Policy is always available on this page at hdk88.io/privacy-policy, along with the effective date and version number indicated at the top of the document.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — hdk88 will notify registered players by email to the address associated with their account at least 14 calendar days before the changes take effect. Your continued use of the hdk88 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms.

If you do not agree with any changes made to this Privacy Policy, you have the right to close your hdk88 account and request deletion of your personal data (subject to the retention obligations described in Section 9 above) by contacting [email protected].

17 Contact and Data Requests

All privacy-related enquiries, personal data access requests, correction requests, erasure requests, objections to processing, and complaints regarding hdk88's data practices should be directed to the hdk88 data protection contact using the details below:

To help us process your request efficiently, please include the following information in all privacy correspondence: your full name as registered on your hdk88 account, your hdk88 username, the email address associated with your account, and a clear description of your request or complaint.

If you are not satisfied with hdk88's response to your privacy request or complaint, you have the right to escalate your complaint by submitting a written formal complaint to [email protected] with the subject line "Formal Privacy Complaint". hdk88 will acknowledge formal privacy complaints within 48 hours and provide a final written response within 14 calendar days.